Yadis Spec .9 Change Proposal: Section 7.3.1 clarify multiple XRD

Larry Drebes ltd at janrain.com
Fri Feb 10 16:47:27 UTC 2006


I hope you are wrong :).   I suspect that the early use of YADIS will be 
based around several common libraries and not one-off implementations.   
This flaw is very easy to test for, and if broken, it should be easy to fix.
larry-

Martin Atkins wrote:
> Unfortunately, this is one of those things that relying parties are
> going to get wrong. I guarantee it!
>
> Previous experience shows that there are two kinds of "wrong" when it
> comes to implementing specs:
> * You got it wrong so it doesn't work at all.
> * You got it wrong so it works most of the time except in some funny
> corner-cases and all of the spec authors are now scowling at you.
>
> This is the latter. Implementors are (by and large) lazy. They'll
> implement the bare minimum to make it look like it works. Most YADIS
> resource descriptors are going to have only one XRD segment.
> Implementors will probably use XPath like /XRDS/XRD/Service which will,
> of course, match the service elements in *all* XRD segments.
>
> So while it's obvious the YADIS spec has to take a definite position on
> this subject, everyone should be prepared for the fact that almost every
> relying party implementation is going to get this wrong and consider
> what the implications of this are.
>
> Cheers,
> -Martin
>
>   


More information about the yadis mailing list